Privacy Policy

• Account information: full name, email, optional phone number. Your password is stored only in a one-way encrypted (hashed) form; no one, including our staff, can see your password.
• Order information: delivery and billing addresses, order contents, payment status, order note.
• Payment: your card details are not stored on our website; they are processed directly on the payment institution’s page using 3D Secure.
• Technical information: IP address, browser type, pages visited and session cookies.
• Communications: emails, form messages and wholesale applications you send us.

• To prepare and ship your order and keep you informed of its status,
• To manage your account, address book and Esila Puan balance,
• To send transactional emails such as password resets and email verification,
• To send newsletters and promotional announcements if you have given permission,
• To keep the website secure and detect erroneous or malicious activity.

We do not sell or rent your information. We share it with the delivery company, payment institution, hosting and email infrastructure providers only to the extent necessary to provide the service, and with competent authorities where legally required. The service providers we work with for this purpose are: PTT Kargo and DHL eCommerce (delivery), Kuveyt Türk Participation Bank (card payments), NetGSM (SMS), Resend (transactional e-mails), EDM Bilişim (e-invoice/e-archive) and Amazon Web Services (hosting).

Site traffic is transmitted over an encrypted connection (HTTPS). Session information is stored in a secure cookie that browser scripts cannot access; all active sessions are ended when you change your password. Login and password reset attempts are limited. No system is perfect; if you notice anything unusual, please let us know at bilgi@esilamarket.com.

Under Law No. 6563 on the Regulation of Electronic Commerce, promotional emails are sent only with your consent. You can unsubscribe at any time, free of charge, using the link in each email or by writing to us. Transactional messages, such as order and account notifications, do not require this consent.

We use cookies other than essential cookies only with your permission. For details and to change your preferences, see our Cookie Policy.

You can update your information in your account, exercise your rights under KVKK (Turkish Personal Data Protection Law No. 6698) or request that your account be deleted. Records subject to legal retention requirements (e.g. invoices) are kept until the required period expires. For details on how to submit a request, see our KVKK Privacy Notice.

We may update this policy. The current version is always published on this page, together with the date it was last updated. We will also notify you of significant changes at your registered email address.